Overview

overview

8

Static

static

f3f264b209...24.exe

windows7-x64

8

f3f264b209...24.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24

  • Size

    793KB

  • Sample

    221203-dbzs4sca8x

  • MD5

    4ae85cee52e46dca7947426cebe071fb

  • SHA1

    ea6f5fc7c596b5a860ad96df9d1606bfd3c1d095

  • SHA256

    f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24

  • SHA512

    c6a92142b5a7ffb88d4fac4cb8a66a9fe8c9833b20c70abcbad49306bddb90a24b022e3b7a0f955c5fc7989848dfab385b9da575aab7c4cb540c2bb9f8bbfdf7

  • SSDEEP

    24576:RTC68l40iaIZCvLgpdVxRN2qIOQ395pr:RTCT40RvLkdj7ID95p

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24

    • Size

      793KB

    • MD5

      4ae85cee52e46dca7947426cebe071fb

    • SHA1

      ea6f5fc7c596b5a860ad96df9d1606bfd3c1d095

    • SHA256

      f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24

    • SHA512

      c6a92142b5a7ffb88d4fac4cb8a66a9fe8c9833b20c70abcbad49306bddb90a24b022e3b7a0f955c5fc7989848dfab385b9da575aab7c4cb540c2bb9f8bbfdf7

    • SSDEEP

      24576:RTC68l40iaIZCvLgpdVxRN2qIOQ395pr:RTCT40RvLkdj7ID95p

    Score
    8/10
    discoverypersistencespywarestealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks